Skip to content
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

The Hacker NewsOct 13, 2026Artificial Intelligence / Identity Security The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance,… 

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached… 

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12… 

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Ravie LakshmananOct 13, 2026Vulnerability / DevSecOps GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated… 

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Ravie LakshmananOct 13, 2026Mobile Security / Cybercrime Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into… 

Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Ravie LakshmananOct 12, 2026Cybersecurity News / Hacking Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That’s not much… 

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Ravie LakshmananOct 12, 2026Cryptocurrency / Cybercrime Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company…